This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa File: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (raw, json) Hash identifier: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA= Subject key identifier: 89:E0:11:39:17:58:70:D6:36:C4:02:20:67:62:E6:E7:35:61:04:F6 Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91 Certificate serial: 019B7A5B75974B291B2F6746C4414E70C9B8 Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.235.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:75:97:4b:29:1b:2f:67:46:c4:41:4e:70:c9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89e01139175870d636c402206762e6e7356104f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:78:21:c6:85:f7:b2:d5:6c:3a:bd:1c:df: 95:3c:02:73:71:12:2e:4d:19:e2:66:27:84:a2:fc: 39:43:ea:2a:18:40:0e:68:47:c2:b8:19:b0:f9:66: 65:86:92:24:31:cf:2a:86:b7:9b:fe:04:50:df:89: ab:99:45:12:37:d8:6d:ca:97:72:4c:57:56:16:dd: 4b:7f:76:e3:e5:3c:40:c9:ca:45:be:be:f0:85:d0: d8:26:95:04:e3:ac:20:a7:4b:68:a0:78:4c:c5:3d: 6d:a5:09:b7:e2:e9:b6:3a:c6:72:d8:a6:b8:1e:ef: c9:4a:0a:ec:de:08:b7:90:db:d8:93:70:4b:34:40: 43:e6:00:88:23:6e:2b:b0:01:39:85:c9:a5:c4:4b: 37:49:83:51:2a:b7:4d:34:84:06:5a:99:4e:f4:27: e0:dc:98:f0:73:5e:6c:15:fb:c2:0c:04:fd:75:e2: e0:0b:66:74:0f:1f:69:93:7c:1b:06:98:53:59:6f: f7:97:19:8c:ed:3e:96:48:55:03:74:df:4d:4d:5d: 29:dc:27:75:b7:74:fe:f7:07:bb:32:54:e0:28:0c: a8:c9:68:1c:2d:54:e5:b9:ea:26:48:97:83:01:09: 38:e0:c0:48:28:f0:b3:9c:4a:c5:22:c8:b9:f0:3f: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:11:39:17:58:70:D6:36:C4:02:20:67:62:E6:E7:35:61:04:F6 X509v3 Authority Key Identifier: keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.199.0/24 Signature Algorithm: sha256WithRSAEncryption 58:0b:1f:31:34:ab:85:cf:af:b2:b6:b7:c5:15:91:99:51:2c: 84:5e:34:3f:0f:9c:e6:b0:a5:c5:74:00:87:f7:4c:b4:80:14: 97:44:17:3f:9b:c7:b1:79:22:76:02:9c:76:36:92:60:85:02: 52:2d:fd:f4:45:82:8a:69:c7:52:3d:cb:06:c7:7c:63:79:dd: 60:41:b0:f8:72:1c:ef:86:68:64:1b:a8:7b:7a:6c:d8:18:8d: 4a:3a:65:03:19:49:dd:2e:5b:d6:52:86:9c:6c:0b:7f:e1:7d: 7d:d6:4d:a8:a1:60:57:57:67:ac:c4:20:5e:eb:ea:4f:2a:00: 86:d8:60:ce:32:a0:29:27:c0:81:fc:1a:6d:38:44:5e:b4:8e: 20:46:45:5f:ca:4a:4b:14:d5:dd:d3:b4:c1:82:e9:0c:d4:85: 6b:46:71:36:61:8f:ac:7c:02:90:fa:07:e5:bd:e0:1c:20:b1: 2d:6b:49:82:a5:13:83:01:8d:dd:e9:74:7e:5d:d4:65:6c:af: 81:10:7b:b7:9f:56:79:c2:e9:39:4b:82:a2:c6:71:37:db:8d: 5e:33:7c:77:35:3e:22:69:e6:44:55:80:63:6c:70:cc:43:db: 9a:b3:6d:9c:69:5f:f6:61:d9:da:48:b6:b9:8f:e0:42:49:d3: f2:7e:40:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3WXSykbL2dGxEFOcMm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYmU5MWViNjNhNDRmMWU5ZjFhODNlZGQyMThhMWVjNzVj MjVlOTEwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWUwMTEzOTE3NTg3MGQ2MzZjNDAyMjA2NzYyZTZlNzM1NjEwNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z4IcaF97LVbDq9HN+VPAJzcRIu TRniZieEovw5Q+oqGEAOaEfCuBmw+WZlhpIkMc8qhreb/gRQ34mrmUUSN9htypdy TFdWFt1Lf3bj5TxAycpFvr7whdDYJpUE46wgp0tooHhMxT1tpQm34um2OsZy2Ka4 Hu/JSgrs3gi3kNvYk3BLNEBD5gCII24rsAE5hcmlxEs3SYNRKrdNNIQGWplO9Cfg 3Jjwc15sFfvCDAT9deLgC2Z0Dx9pk3wbBphTWW/3lxmM7T6WSFUDdN9NTV0p3Cd1 t3T+9we7MlTgKAyoyWgcLVTlueomSJeDAQk44MBIKPCznErFIsi58D9kOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIngETkXWHDWNsQCIGdi5uc1YQT2MB8GA1UdIwQY MBaAFAy+ketjpE8enxqD7dIYoex1wl6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAt YmRjNWFlOGFiZGIxLzEvaWVBUk9SZFljTlkyeEFJZ1oyTG01elZoQlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAtYmRjNWFlOGFiZGIx LzEvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0G CSqGSIb3DQEBCwUAA4IBAQBYCx8xNKuFz6+ytrfFFZGZUSyEXjQ/D5zmsKXFdACH 90y0gBSXRBc/m8exeSJ2Apx2NpJghQJSLf30RYKKacdSPcsGx3xjed1gQbD4chzv hmhkG6h7emzYGI1KOmUDGUndLlvWUoacbAt/4X191k2ooWBXV2esxCBe6+pPKgCG 2GDOMqApJ8CB/BptOERetI4gRkVfykpLFNXd07TBgukM1IVrRnE2YY+sfAKQ+gfl veAcILEta0mCpRODAY3d6XR+XdRlbK+BEHu3n1Z5wuk5S4KixnE3241eM3x3NT4i aeZEVYBjbHDMQ9uas22caV/2YdnaSLa5j+BCSdPyfkDP -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:19 2026 by rpki-client